A state restoration path produces a user-visible duplicate after an interrupted session. The affected area is push inbox.
Repair the push inbox access policy implementation so it returns only permitted actions and explicit denial reasons.
Evidence
- Affected surface: iOS / Swift / push inbox.
- Observed failure family: enforce permission rules.
- Scope policy: zoneState must equal healthy.